Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/416CAAB83B7BBF254D75E3859D5C5486798BFF82.cer
File:                     416CAAB83B7BBF254D75E3859D5C5486798BFF82.cer (raw, json)
Hash identifier:          T6QMgq7dHvRvUJA2EDi6eiC77RYle1uanK0l6QqLmJk=
Subject key identifier:   41:6C:AA:B8:3B:7B:BF:25:4D:75:E3:85:9D:5C:54:86:79:8B:FF:82
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F6D85A01B0E84DDEEA5527E0EFEA86FAA9AC28B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/416CAAB83B7BBF254D75E3859D5C5486798BFF82.mft
caRepository:             rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Aug 2024 21:37:11 +0000
Certificate not after:    Thu 31 Jul 2025 21:42:11 +0000
Subordinate resources:    AS: 266429
                          IP: 45.4.178.0/24
                          IP: 45.165.74.0/24
                          IP: 170.81.236.0/22
                          IP: 2804:37b0::/32
Validation:               Failed, certificate revoked on Thu 01 Aug 2024 21:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6d:85:a0:1b:0e:84:dd:ee:a5:52:7e:0e:fe:a8:6f:aa:9a:c2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  1 21:37:11 2024 GMT
            Not After : Jul 31 21:42:11 2025 GMT
        Subject: CN=416CAAB83B7BBF254D75E3859D5C5486798BFF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:a6:5e:71:82:79:4d:78:45:c1:73:87:54:
                    bf:63:66:18:c6:54:07:78:0e:f8:47:be:06:bc:c9:
                    33:d7:5d:84:7f:60:4d:e3:71:d0:c0:18:22:96:f7:
                    65:1a:9e:b0:2c:e2:c6:de:68:64:6a:c8:3a:cf:25:
                    60:7e:3d:34:e4:d4:5e:19:b8:32:4b:4b:8d:2f:ed:
                    46:d2:0e:03:58:18:de:db:ed:3d:10:fd:30:81:42:
                    2c:2f:01:b2:6c:be:97:a3:2a:6d:91:92:32:bb:55:
                    03:2a:88:79:90:75:9c:43:0f:c8:cb:3e:0f:c3:db:
                    bc:5a:00:41:06:34:26:2c:c7:91:3c:e2:b5:6b:00:
                    cc:63:b8:a9:de:9f:7f:6c:4f:1d:93:85:bd:97:3d:
                    8a:4e:72:7a:65:3e:2f:e1:b8:a4:10:be:0f:ca:bb:
                    3e:24:b5:27:cf:b9:de:1a:5c:56:b2:9e:49:59:8a:
                    e0:7d:71:91:86:87:b0:a0:ca:9a:b5:a5:34:b2:99:
                    f5:d7:f9:5d:82:76:ed:45:00:aa:e1:a9:a4:f9:7b:
                    87:2b:1d:12:6d:91:72:dd:65:f5:ce:46:97:c2:85:
                    b0:9d:4f:01:67:4f:93:c0:b9:87:c7:8d:15:4e:11:
                    c3:75:d2:58:0e:2c:e0:8b:c9:65:d5:2d:82:74:eb:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:6C:AA:B8:3B:7B:BF:25:4D:75:E3:85:9D:5C:54:86:79:8B:FF:82
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/416CAAB83B7BBF254D75E3859D5C5486798BFF82.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.178.0/24
                  45.165.74.0/24
                  170.81.236.0/22
                IPv6:
                  2804:37b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266429

    Signature Algorithm: sha256WithRSAEncryption
         63:79:d2:7e:fb:f0:ce:ee:bf:cf:92:5f:97:e3:3d:80:1e:30:
         e5:e3:da:6a:1b:d2:97:1f:33:5c:78:4c:c7:6d:87:de:17:3f:
         a8:7b:29:c9:4a:30:43:a6:73:81:87:99:21:46:46:28:23:54:
         a9:76:bc:0e:91:85:2b:0c:44:e9:cd:4e:a6:f2:53:05:6b:77:
         f2:3d:7a:9f:9b:13:a3:94:1a:30:e1:a3:7c:ac:f3:a7:dd:c1:
         91:01:71:43:3f:d8:96:ea:bc:2e:c4:20:f5:88:e5:06:ab:89:
         a6:3f:b9:1a:95:57:d5:83:94:02:3c:a9:84:de:52:1a:1c:3e:
         61:35:ee:33:2f:1d:ce:13:a0:f7:b8:9b:0d:07:85:80:0b:06:
         30:e9:7d:fd:9d:45:f1:f3:bd:97:ca:ed:cf:aa:ea:00:07:1e:
         d0:d3:33:45:a0:af:49:62:37:8a:a2:3c:8a:7b:03:75:4c:8b:
         55:b1:ec:24:9b:fd:9c:f8:70:90:a3:82:b2:06:16:15:6b:e1:
         4f:13:59:b0:12:07:8e:dd:c3:6c:13:f5:80:50:74:a5:11:a4:
         31:6e:ac:be:03:f5:d2:ee:94:bf:21:94:cd:77:1c:ab:33:e5:
         f3:19:14:bd:96:22:d3:22:31:fb:83:33:a4:51:81:32:4f:b2:
         f1:f1:ad:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:15 2025 by rpki-client